UK privacy advocates warn over COVID-19 contact tracing app

by Reuters
Thursday, 30 April 2020 13:52 GMT

Alfredo Sanchez, project manager at the Swiss Federal Institute of Technology (EPFL), shows the usage of the contact tracking application which will be launched on May 11 by the Swiss Government for easing of the lockdown caused by the coronavirus disease (COVID-19) outbreak, at the Chamblon barracks, Switzerland April 30, 2020. REUTERS/Denis Balibouse

Image Caption and Rights Information

The COVID-19 contact tracing app soon to be launched in Britain could be used as state surveillance, warn privacy experts

LONDON, April 30 (Reuters) - Leading privacy advocates in Britain have urged the government to prevent a soon-to-be launched COVID-19 contact tracing app from turning into a form of state surveillance.

Countries are rushing to develop apps which, along with a wider testing and tracking programme, are seen as key to easing social distancing rules that have all but shut global economies.

Matthew Gould, chief executive of the National Health Service's technology group NHSX, told a parliamentary committee on Tuesday that an app could be rolled out widely in Britain in two to three weeks.

It will keep a record of anonymised tokens or identities of those people the phone's owner has been in contact with. The data will stay on the phone until the owner becomes symptomatic when they will have the option to submit the data to the app, alerting those with whom they came into contact.

Leading academics and scientists working in security and privacy at universities across Britain published a joint letter saying Britons would only adopt the app if they felt their privacy was protected.

"It is vital that, when we come out of the current crisis, we have not created a tool that enables data collection on the population, or on targeted sections of society, for surveillance," they said.

In Europe, most countries have chosen short-range Bluetooth "handshakes" between mobile devices as the best way to register a potential contact, although it does not provide location data.

But they have disagreed about whether to log such contacts on individual devices or on a central server - which would be more directly useful to existing contact tracing teams.

Germany recently changed course, saying it would join a growing number of other European countries in adopting a "decentralised" approach supported by Apple and Google.

Gould told the parliamentary committee he believed the British app would protect privacy even though it would build a centralised system. He said NHSX would publish the privacy model close to launch.

He said later versions of the app could also ask users to provide more details such as location, if they agreed.

"We really believe there are big advantages to the way we're doing it but we don't believe that it's privacy endangering," he said.

Gould was asked during the hearing whether Britain's National Cyber Security Centre was involved in the decision to adopt the more centralised approach. He said the body had been part of the discussions.

(Reporting by Sarah Young and Kate Holton; Editing by Edmund Blair)

As countries around the world roll out digital surveillance tools to tackle the coronavirus pandemic, we want to find out what may have been missed in news reports. Help us by flagging digital surveillance measures where you live.

You can submit your response anonymously. If you provide an email address, we may follow up with you for more information. Any information you share with us will remain strictly confidential and will be used only in accordance with our Privacy Statement.